Re: SMS 2FA shouldn't even count as "security"
@ adrian 4 "you're suggesting passing the authentication secret over the open phone network"
yes, so what - it's a one time secret. If you manage to eavesdrop on that message somehow, how are you then going to enter it into my browser that requested it?